Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.mft
File: 1LvtYwkUOYI-05GkclNsD8r-iVc.mft (raw, json)
Hash identifier: c6DLMq3aHNUrrNPbW0RBtBP5/u4NaVjj9XudzndMlL0=
Subject key identifier: 83:3F:C9:6D:1E:3D:A8:1C:D8:04:AF:97:A6:34:16:3C:C3:39:ED:6F
Authority key identifier: D4:BB:ED:63:09:14:39:82:3E:D3:91:A4:72:53:6C:0F:CA:FE:89:57
Certificate issuer: /CN=d4bbed63091439823ed391a472536c0fcafe8957
Certificate serial: 0194BCE0DF023CFF2D8F93BBEDFFA9150485
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LvtYwkUOYI-05GkclNsD8r-iVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 15:00:41 +0000
Manifest this update: Fri 31 Jan 2025 15:00:41 +0000
Manifest next update: Sat 01 Feb 2025 15:00:41 +0000
Files and hashes: 1: 1LvtYwkUOYI-05GkclNsD8r-iVc.crl (hash: lb401bJOpRiDMkf9YW54R7mbwBz/YWVsGTw0ec095ik=)
2: xwtPGS1yMeN-HM3DHZ4Zn1vag7Y.roa (hash: L3GBOsFd0bBnPhXITzZhpRuxfNXWQNfdanb1RhnwKUc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:df:02:3c:ff:2d:8f:93:bb:ed:ff:a9:15:04:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4bbed63091439823ed391a472536c0fcafe8957
Validity
Not Before: Jan 31 15:00:41 2025 GMT
Not After : Feb 1 15:00:41 2025 GMT
Subject: CN=833fc96d1e3da81cd804af97a634163cc339ed6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a9:90:23:88:ae:04:cb:b0:f3:7f:a8:44:1d:
e0:79:41:7d:87:2b:12:d9:09:8e:35:71:d9:b5:7d:
72:d2:fe:56:95:77:e1:a8:70:06:1d:c3:dd:5e:a4:
c2:df:06:d3:e8:f1:dc:91:a8:04:bb:a8:85:88:bf:
50:72:b6:04:8c:c8:0f:ab:e7:17:6e:20:dd:8f:78:
0f:8a:3a:22:8d:f3:e2:02:cd:7d:dc:42:c3:10:3f:
46:a8:f9:ef:38:cb:3b:63:b5:34:25:60:f0:9f:84:
c3:2f:f8:61:a5:5d:08:87:7f:72:40:95:66:17:b8:
8b:b9:0d:04:05:17:ec:f7:ba:c8:7a:69:dd:1f:1b:
2d:69:bc:7b:fd:fd:ee:62:e6:1c:43:58:14:70:ba:
c0:0e:9d:0a:fb:b3:5c:2c:fc:c7:66:6c:b4:df:9a:
80:88:44:56:b7:83:6c:c0:e6:cf:bc:5b:3f:40:14:
48:43:24:fa:e6:1b:84:89:27:42:ec:3d:ec:70:10:
d6:ff:8b:95:ec:0a:a7:d2:cf:dd:04:e5:50:ff:17:
70:96:77:f7:6c:35:38:a8:35:df:56:9b:75:a2:99:
aa:d6:06:19:7d:33:a5:0e:2c:a6:8a:03:ab:cb:ad:
59:0e:c3:c7:46:3a:2b:b7:94:2e:31:fc:9f:e4:4f:
dd:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:3F:C9:6D:1E:3D:A8:1C:D8:04:AF:97:A6:34:16:3C:C3:39:ED:6F
X509v3 Authority Key Identifier:
keyid:D4:BB:ED:63:09:14:39:82:3E:D3:91:A4:72:53:6C:0F:CA:FE:89:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LvtYwkUOYI-05GkclNsD8r-iVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:b9:c3:2c:b5:1b:d4:75:64:a2:3b:04:f4:bc:66:f6:c5:9f:
76:fd:fb:a0:09:81:e3:b3:55:d5:2e:ff:79:ec:bb:16:99:d6:
cc:3c:30:1a:e6:8a:2b:cb:de:49:15:1b:a7:8e:f1:e0:d5:16:
1b:e0:d1:8b:17:74:d7:c9:1e:f5:8a:75:46:34:92:39:76:dc:
bb:48:4d:30:d4:f4:50:f4:e6:0f:8b:a9:53:67:20:b9:90:dc:
0a:fa:96:c1:68:5c:58:d7:12:14:6a:5e:68:1e:a9:e8:24:95:
0c:4f:86:d7:35:5f:60:75:24:69:60:52:dd:6b:98:77:ca:09:
27:12:ee:dc:f7:87:fa:4f:fd:9e:a1:7d:52:09:3d:db:c1:e8:
43:e3:51:e8:28:13:d3:d8:c8:56:e8:da:d4:aa:be:50:d0:6e:
65:04:d1:07:5a:ab:0d:80:9b:b4:52:03:77:b1:35:74:70:11:
30:9f:d7:2a:9e:37:06:88:67:a9:3c:99:b4:09:95:cf:d2:14:
cc:74:ea:13:f7:84:b0:fc:ad:b0:1a:f3:40:dc:c8:74:c0:82:
ad:db:7a:86:3b:05:76:78:38:cd:1e:b3:cd:2e:51:ba:c9:d9:
e2:61:33:80:a4:fb:19:7c:07:8a:40:02:ab:c0:74:5e:c2:54:
3a:d1:99:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84N8CPP8tj5O77f+pFQSFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0YmJlZDYzMDkxNDM5ODIzZWQzOTFhNDcyNTM2YzBmY2Fm
ZTg5NTcwHhcNMjUwMTMxMTUwMDQxWhcNMjUwMjAxMTUwMDQxWjAzMTEwLwYDVQQD
Eyg4MzNmYzk2ZDFlM2RhODFjZDgwNGFmOTdhNjM0MTYzY2MzMzllZDZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KmQI4iuBMuw83+oRB3geUF9hysS
2QmONXHZtX1y0v5WlXfhqHAGHcPdXqTC3wbT6PHckagEu6iFiL9QcrYEjMgPq+cX
biDdj3gPijoijfPiAs193ELDED9GqPnvOMs7Y7U0JWDwn4TDL/hhpV0Ih39yQJVm
F7iLuQ0EBRfs97rIemndHxstabx7/f3uYuYcQ1gUcLrADp0K+7NcLPzHZmy035qA
iERWt4NswObPvFs/QBRIQyT65huEiSdC7D3scBDW/4uV7Aqn0s/dBOVQ/xdwlnf3
bDU4qDXfVpt1opmq1gYZfTOlDiymigOry61ZDsPHRjort5QuMfyf5E/dswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIM/yW0ePagc2ASvl6Y0FjzDOe1vMB8GA1UdIwQY
MBaAFNS77WMJFDmCPtORpHJTbA/K/olXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUx2dFl3a1VPWUktMDVHa2NsTnNEOHItaVZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi83NzU3ZWQtZDAyMC00NzFmLWJiYzUt
MTdiZjIwMmU1ZWVlLzEvMUx2dFl3a1VPWUktMDVHa2NsTnNEOHItaVZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi83NzU3ZWQtZDAyMC00NzFmLWJiYzUtMTdiZjIwMmU1ZWVl
LzEvMUx2dFl3a1VPWUktMDVHa2NsTnNEOHItaVZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHLnDLLUb
1HVkojsE9Lxm9sWfdv37oAmB47NV1S7/eey7FpnWzDwwGuaKK8veSRUbp47x4NUW
G+DRixd018ke9Yp1RjSSOXbcu0hNMNT0UPTmD4upU2cguZDcCvqWwWhcWNcSFGpe
aB6p6CSVDE+G1zVfYHUkaWBS3WuYd8oJJxLu3PeH+k/9nqF9Ugk928HoQ+NR6CgT
09jIVuja1Kq+UNBuZQTRB1qrDYCbtFIDd7E1dHARMJ/XKp43BohnqTyZtAmVz9IU
zHTqE/eEsPytsBrzQNzIdMCCrdt6hjsFdng4zR6zzS5RusnZ4mEzgKT7GXwHikAC
q8B0XsJUOtGZng==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:25 2025 by rpki-client